Skip to content

Hashavatar API 1.0.1

Choose a tag to compare

View all tags
@eldryoth eldryoth released this 29 May 22:23
Immutable release. Only release title and notes can be modified.
v1.0.1
This tag was signed with the committer’s verified signature.
eldryoth
SSH Key Fingerprint: EoLRQ5k4J5pYz3UMFmkrV798gYFNkToGS2xEPvebqB4
Verified
Learn about vigilant mode.
d7e68ea
This commit was signed with the committer’s verified signature.
eldryoth
SSH Key Fingerprint: EoLRQ5k4J5pYz3UMFmkrV798gYFNkToGS2xEPvebqB4
Verified
Learn about vigilant mode.

hashavatar-api 1.0.1

Security hardening patch release.

  • Added process-wide backpressure for avatar and Open Graph rendering work.
  • Sharded the in-memory rate limiter to reduce hot-path lock contention.
  • Tightened S3 persistence behavior so only real missing objects trigger writes.
  • Clamped S3 presigned URL TTLs to the SigV4-safe range.
  • Documented /metrics proxying and trusted-proxy deployment boundaries.
  • Re-enabled yanked-crate checks and crates.io index refresh for cargo audit.
  • Updated to Hashavatar 1.0.1 crate.
Assets 3
Loading
0 Join discussion